Best ID Proof in India: What to Show, What to Guard

“Aadhaar card please.” That is how it goes now at a hotel reception, a mobile shop, a bank branch, a school office and even the security desk of an apartment complex. Not “any ID proof”, but Aadhaar specifically. Most of us hand it over without a second thought, as if it were the only card in our wallet. It is not. Most of us also carry a voter ID, a driving licence and maybe a passport. At most of these counters, any one of them does the job perfectly well.

This post is about questioning that habit. So what is the best ID proof in India? It depends on the counter, but it is rarely the one that is demanded by default. I go through what each card actually proves, which ones expire, who carries the risk when something goes wrong and a simple rule for deciding what to show and what to guard. By the end, I hope you will reach for a different card the next time someone says “Aadhaar card please”.

Note: I am not a lawyer. This is written from my common understanding as a citizen. Rules change and counters differ, so treat this as a practical guide rather than legal advice. If you have a different perspective or if something here is not correct, do discuss it in the comments and correct me.

Why this question matters more than it looks

Think about how many copies of your Aadhaar exist right now. One with the hotel in Goa from that trip years ago. One with the gas agency. One with the broker who never found you a flat. One with the gym, the courier franchise, the school, the society office and possibly a dozen shops that wanted “any ID” and got the one card everybody carries. Most of those copies sit in unlocked cupboards, scanned into shared folders or on a receptionist’s phone. You have no idea where they are today and neither do they.

That is the real cost of making one document the default. Aadhaar did not become the answer to every ID question because people chose it. Adults were pushed into it through rations, pensions, bank accounts, SIM cards, PAN linking and school admissions. Every one of those links also meant business. UIDAI began charging Rs 20 for every eKYC and 50 paise for every yes or no authentication in 2019. A whole industry of private eKYC and verification companies grew on top of it. Pressure made it the default and the default made it the most copied document in India.

Nobody is asking the one question that matters at the counter: if this particular copy leaks, what can someone do with it? Once you ask that question, the choice of which card to hand over stops being random.

The documents that actually count

India does not have one national ID card. It has a handful of documents that the system treats as proof of who you are. The cleanest official list comes from banking. RBI’s KYC Master Direction defines “officially valid documents” for opening accounts: a passport, a driving licence, proof of possession of Aadhaar, a voter ID card issued by the Election Commission, a NREGA job card signed by a state official and a letter from the National Population Register. Almost every other institution borrows from this list.

The bank needs two things from you: proof of identity and proof of address. PAN takes care of the identity part. Banks collect it anyway because of income tax rules, or Form 60 if you do not have a PAN. But PAN carries no address, so you still need one of the documents above for the address part. That is also why a hotel will never accept PAN for its guest register. Notice that Aadhaar appears as just one option among six. Nothing in the banking rule makes it the first choice. That habit came from us, not from the law.

The blast radius test

Here is the test I use before handing over any card. Imagine the photocopy lands with the worst possible person. What can they do with it? I call this the blast radius. A card with a small blast radius is safe to show almost anywhere. A card with a big blast radius should come out only when the law genuinely requires it.

Aadhaar has the biggest blast radius of the lot. It is tied to your mobile number, your bank accounts, your fingerprints and an entire system of electronic KYC. Fraudsters have used Aadhaar details along with cloned fingerprints to withdraw money through Aadhaar Enabled Payment Systems at rural banking points. PAN comes next: a copy of your PAN with a matching photo is the raw material for loans and credit lines taken in your name, which you discover only when a recovery agent calls. A driving licence or voter ID, by contrast, unlocks very little on its own. Someone holding a photocopy of my driving licence cannot open a credit line or withdraw from my bank account with it.

Who carries the risk when something goes wrong

There is another difference between these cards that rarely gets discussed: who is responsible when fraud happens. When a hotel, a bank or a telecom shop accepts your driving licence or passport, the job of checking it belongs to them. They look at the photo, compare it with your face and decide. If they accept a fake licence from an impostor, the failure is theirs. The onus of catching the fraud sits with the entity that accepted the document.

Aadhaar authentication flips that. Once a fingerprint or an OTP matches, the system treats the transaction as done by you. If someone withdraws money from your account with a cloned fingerprint at a banking point, the records simply say the authentication succeeded. Proving that it was not you becomes your problem. The more of our lives run on Aadhaar authentication, the more that burden quietly moves from institutions to individuals, many of whom have no way of fighting it.

This is not a theory. To register a property, the law requires your thumb impression at the sub-registrar’s office. In Karnataka, agents downloaded such registration documents from the state’s Kaveri 2.0 portal, complete with thumb impressions and Aadhaar numbers. Fraudsters copied the thumbprints onto silicone sheets and withdrew money through Aadhaar enabled payments from machines in other states. Bengaluru police had registered 128 such cases by January 2024. In Hyderabad, police arrested six people in November 2023 who had about 2,500 land registration documents on a pen drive. They made rubber clones of around 1,000 fingerprints and ran about 2,500 transactions.

In Haryana, a woman in Faridabad found her bank account emptied after a land sale. The bank manager said it was done with her Aadhaar number and fingerprints. Police said fraudsters were lifting fingerprints from land documents published on a government website. None of these people were careless. They registered a property the way the law asks them to. The government put the documents online and the fraudsters did the rest. Yet every one of those withdrawals passed authentication, so it was the victims who had to run to the police and the bank to prove it was not them.

What America does with its most sensitive number

The United States has a number that works a lot like Aadhaar for money matters: the Social Security Number. It links to your taxes, your credit history and your bank accounts. The American advice on it is the exact opposite of our habit. The Social Security Administration itself tells people not to carry the card every day, to keep it in a safe place and to share the number only when required, which it says is rare. It even tells people to ask why the number is needed and what happens if they refuse.

For everyday identity, Americans show a driving licence or a state ID card. Nobody photocopies a Social Security card to check into a motel. The one number that can open loans in your name is treated as something to protect, not something to hand out.

There are two more differences that matter. First, the SSN is just a number. There is no fingerprint or iris scan behind it, so nobody’s access to food or a pension depends on whether a machine recognises their thumb. Second, the onus of fraud stays with whoever accepted it. If a lender opens a credit card in your name with a stolen SSN, the burden of that bad check is on the lender.

Compare that with Aadhaar authentication, where a successful match is treated as you. India built a similar kind of number, added biometrics, shifted the risk to the citizen and then made it the default answer at every counter.

Voter ID: the card that never expires

Here is a detail most people miss. Your voter ID, officially the Electors Photo Identity Card or EPIC, has no validity date printed on it. It does not expire. A card issued in 2004 is as valid as identity proof today as it was on the day you got it. No renewal, no fee, no queue. For walk-in counters that is a real advantage: nobody can reject it for being out of date, because there is no date to be out of.

The voter ID has another quiet strength. Only Indian citizens can be enrolled on the electoral roll, so a voter ID says something that Aadhaar legally cannot. And its blast radius is small. It is not linked to your bank accounts, it does not carry biometrics and a photocopy of it gives a fraudster almost nothing to work with. You can now also download it as an e-EPIC from the Election Commission, which means even if the plastic card is lost or faded, a digital version is available.

There is one catch. A voter ID is only as good as your name on the electoral roll and that roll gets revised. During the special intensive revision in Bihar in 2025, about 65 lakh names were dropped from the draft roll. If your name is removed, your voter ID may be cancelled along with it. When a revision is announced in your state, check that your name is still on the roll. If your card is old, damaged or lost, you can apply for a fresh one online on the Election Commission’s voter services portal. A card with no expiry is also a card nobody rechecks. That brings us to the counter-intuitive part of this post.

When a card that expires is the better card

An expiry date sounds like a disadvantage. Sometimes it is the opposite. A document with a validity period is a document that gets checked again. Your passport is renewed every ten years, with a fresh photo and fresh verification each time, often including a police verification. A driving licence comes up for renewal on a schedule too. So a valid passport tells the person across the counter something a voter ID issued in 2004 cannot: the face, the address and the details were confirmed by the government within the last few years.

That matters when the stakes are higher. Opening a bank account, registering a property, a background check by a new employer, a visa application or a rental agreement with police verification are all situations where the verifier wants confidence, not just a card. A current passport or a recently renewed driving licence gives that confidence instantly. The voter ID wins on convenience. The card with a validity date wins on trust. The trade-off is simple: an expired passport or licence may be refused outright, so the card that expires is only better while it is valid.

For reference, an adult passport is valid for ten years and a minor’s passport for five. Under the current motor vehicle rules, a licence issued before you turn 30 is valid until you turn 40, after which renewals come in shorter blocks of ten years and later five. Aadhaar and PAN have no expiry at all.

Driving licence: the everyday workhorse

If I had to pick one card for everyday use, it would be the driving licence. It carries your photo, your date of birth and your address. It is on the banking list of valid documents. Airports accept it. Hotels accept it. Most of today’s licences are smart cards with photos from the last decade, so the verifier sees a face that actually looks like you. And its blast radius is small, because a copy of a licence is not a key to your bank account.

The one gap is people who do not drive. If you have never needed a licence, the voter ID is your workhorse instead and the passport is your high-trust backup.

Passport: the strongest card, used sparingly

The passport is the strongest identity document an Indian can hold. It proves identity, it proves citizenship, it carries an address on the last page and it comes with police verification behind it. For international travel there is no substitute. For high-trust paperwork it is the card that ends arguments.

The reason to use it sparingly is practical rather than legal. Replacing a lost passport is slow and painful and it is the one document you cannot afford to be without the week before a trip. A photocopy of a passport is also useful to visa and identity fraudsters in ways a voter ID copy is not. So keep the passport for travel and for the few situations where you need maximum trust. For a hotel check-in in your own state, it is overkill.

Aadhaar: what the law actually says

The Supreme Court’s 2018 Aadhaar judgment drew the lines clearly. The court upheld Aadhaar for government welfare schemes and for linking with PAN but held that it cannot be made mandatory for opening bank accounts, getting mobile connections or school admissions. It struck down the provision that let private companies demand Aadhaar on the strength of a contract. Later amendments allowed banks and telecom companies to use Aadhaar, but only voluntarily, with other documents as alternatives.

Then there is the citizenship question. The Aadhaar Act itself says an Aadhaar number is not proof of citizenship or domicile. In September 2025 the Supreme Court made the same point during the Bihar electoral roll revision. It directed the Election Commission to accept Aadhaar as an identity document while drawing a clear line between identity and citizenship. UIDAI itself has said Aadhaar is not proof of date of birth. Its August 2023 notification, cited in a petition the Supreme Court is now hearing, describes Aadhaar as proof of identity and not proof of citizenship, address or date of birth.

Put simply, Aadhaar proves who you are. It does not prove that you are a citizen. It does not prove your date of birth. It does not prove where you live. Banks still accept it as address proof under RBI’s KYC rules, even though UIDAI itself says it is not one. So the most demanded card in India is also the one that legally proves the least.

In practice the coercion continues anyway. I wrote about schools forcing APAAR registrations in my APAAR ID post, where four of us parents went to the Supreme Court over consent. Government portals do it too: as I noted in my Udyam registration post, the MSME portal still insists on Aadhaar even though the law treats it as voluntary. When a counter says “Aadhaar only”, it is worth asking politely which rule says so. Often there is none.

Consent that only has a yes button

On paper, the law is clear. The 2019 amendments that let banks and telecom companies use Aadhaar made it voluntary, gave customers the choice of a passport or other notified documents and said in so many words that no person shall be denied any service for not having an Aadhaar number. Alternatives must exist.

Now try signing up for a service online. The form asks for your Aadhaar number, sends an OTP and moves on. There is rarely a visible option to use another document in the same flow. Sometimes there is a line about emailing documents or visiting a branch, which is an alternative only in name. You tick the consent box because there is nothing else to tick. That is not consent. Consent that cannot be refused is just a formality.

Compare that with how it works elsewhere. Most foreign providers that need to verify you online accept a passport or a driving licence. In the US you can open a bank account with a passport and other documents, even without a Social Security Number. Now try opening a savings account online in India without Aadhaar. The instant online route at most banks starts with an Aadhaar OTP. Even where a bank’s FAQ says Aadhaar is not mandatory, choosing another document usually means the account is opened only after the branch contacts you.

Real consent has two buttons. If a service asks for Aadhaar, the same screen should let you say no and continue with a voter ID, a driving licence or a passport, without extra delay or penalty. That is the standard we argued for in the APAAR case too: consent must be meaningful, which means the option to refuse has to be real. Until services build that, the burden of finding the alternative falls on you, which is one more reason to know your cards well.

When your own fingerprints stop working

Aadhaar’s biometric promise assumes your body stays the same. It does not. Fingerprints fade with age and wear out with years of manual work: farm labour, construction, washing clothes, handling hot vessels in a kitchen. Eyes change too. A person who enrolled at 35 may find at 70 that the machine at the ration shop or the banking point no longer recognises them. Nothing about who they are has changed. The machine simply says no.

This is not a hypothetical worry. The People’s Archive of Rural India reported on an elderly couple in south Bengaluru, Aadhilakshmi, 72 and Kunnaiah Ram, 83, who went six months without their rations because their fingerprints kept failing at the ration shop. The shop attendant knew them personally but could not hand over rations after a failed check. The same report found children and former construction workers in the same situation. The person behind the counter knew who they were. The machine did not.

I have seen this up close. My grandfather had to go through Aadhaar authentication when he was 94. At that age, a fingerprint scanner should not get to decide whether someone is the person he has been all his life. It made one thing clear to me: the time to question Aadhaar-only systems is when we are young and able to push back, not when we are old and depend on a machine to recognise us.

If you have elderly parents or grandparents who depend on fingerprint-based services, test their authentication before the day they urgently need it. Keep a second form of ID handy for them, because the card that never fails at a counter is often the plain old voter ID.

The people who cannot argue at the counter

Much of this post assumes you can push back. You can ask which rule says “Aadhaar only”, offer a different card or escalate to a grievance officer. Many people cannot. A daily wage worker, an elderly widow collecting a pension or a migrant labourer far from home does not get to choose which card to show. When the system says Aadhaar, they bring Aadhaar. When the system fails, they go home empty-handed and come back another day, losing a day’s wages in the process.

The cost of that can be brutal. In 2017, 11-year-old Santoshi Kumari died in Simdega district of Jharkhand. Her family’s ration card had been cancelled because it was not linked to Aadhaar and activists said she had gone eight days without food. Officials said she died of malaria. Whatever the medical cause, the larger fact was not in dispute: a poor family lost its food rations because of a missing database link.

The pattern shows up at scale too. From 1 January 2024, wages under the rural employment guarantee scheme had to be paid through the Aadhaar based payment system. Data from NREGA Sangharsh Morcha showed that 8.9 crore registered workers, about 34.8%, were not eligible for that payment system at the end of December 2023. Over the previous two years, nearly 7.6 crore job cards had been deleted. Behind each of those numbers is someone who could not easily walk into an office and argue.

This is why the choice of card matters beyond your own wallet. Every time those of us who can push back simply hand over Aadhaar without a question, “Aadhaar only” becomes a little more normal at counters where others have no voice. Using the card that fits the situation and asking politely why a counter insists on one is a small way of keeping alternatives alive for people who need them most.

The masked Aadhaar advisory that lasted two days

There is a small story here that says a lot. On 27 May 2022, UIDAI’s Bengaluru office issued an advisory telling people not to share photocopies of their Aadhaar with anyone, warning that they could be misused, recommending a masked version that shows only the last four digits and saying organisations without a licence to use Aadhaar should not be given it. Hotels and other private counters were the obvious target. Two days later, on 29 May, the advisory was withdrawn, citing the possibility of misinterpretation. People were told to simply “exercise normal prudence”.

Withdrawn or not, the advice inside it was sound and still is. Masked Aadhaar is a real, official format that you can download from the UIDAI website. It shows only the last four digits of your number. For any counter that genuinely needs to see Aadhaar but has no business storing your full number, the masked version is the better thing to hand over. The advice was right, but it lasted only two days.

Hotels and homestays: what happens on the ground

Hotels and homestays do have to record the identity of guests, usually because of local police requirements. What they do not have is any rule saying that ID must be Aadhaar. A driving licence, voter ID or passport serves the same purpose. PAN will not work here, because the register needs an address and PAN does not carry one. If the reception insists on Aadhaar, offering one of the others is perfectly reasonable.

Every few years there is an announcement that this will change. The latest reports talk of hotels registering for offline verification and scanning a QR code instead of keeping photocopies. Announcements like these make good headlines. On the ground, the 2022 advisory lasted two days and the photocopier at the reception desk is still working. Until something changes where it matters, the simplest protection is your own choice of card.

Which card to show where

Here is the practical version, counter by counter. At a hotel or homestay, show a driving licence or voter ID. At the airport, any of the standard documents work: driving licence, voter ID, passport or Aadhaar. For a new SIM, the telecom rules accept other valid documents, so a licence or voter ID will do. For a bank account, any one of the valid documents plus PAN or Form 60 is enough, a point I covered while writing about whether a small business needs a current account.

For a rental agreement or police tenant verification, a driving licence or passport works well because both carry an address verified in the last few years. For a new employer’s background check, a valid passport is ideal. For government subsidies, ration and pension schemes, the law does allow Aadhaar to be required. That is exactly where the exclusion problems above hit hardest, so ask for the alternative the system is supposed to offer. For a gym, a society register, a courier pickup or an office reception, ask whether they need a government ID at all. Usually a name and phone number is enough and nobody needs a copy of anything.

Where	Show this	Avoid if you can
Hotel or homestay check-in	Driving licence or voter ID	Aadhaar photocopy
Domestic flight	Driving licence, voter ID or passport	Unofficial phone photos
New SIM card	Driving licence or voter ID	Leaving any copy behind
Bank account	Any valid document plus PAN or Form 60	Being told Aadhaar is compulsory
Rental and tenant verification	Passport or driving licence	Full Aadhaar copy
Government subsidies and pensions	Aadhaar (law allows it)	Being turned away without an alternative
Gym, society, office reception	Name and phone number	Any ID photocopy

If the counter still insists on Aadhaar

Most of the time, offering another card is enough. When it is not, stay polite and ask one simple question: which rule says it has to be Aadhaar? Most staff are following a habit, not a rule. Offer your driving licence, voter ID or passport in the same breath, so it is clear you are not refusing to identify yourself. If they still refuse, ask for the name of the policy that requires it. A written answer is rare, because there usually is none.

For banks, write to the bank’s grievance officer and point out that RBI’s KYC rules accept any officially valid document. If there is no reply in 30 days or the reply does not help, you can file a complaint on the RBI complaint management system. For an online service that only offers Aadhaar, look for an “other documents” option, write to its support or grievance email and keep the reply. For a hotel, simply show another ID and ask them to record that. Every time someone asks the question, the next person in the queue has an easier time.

How to guard what you do hand over

Sometimes you will have to hand over a sensitive card. When that happens, a few habits shrink the blast radius. Use masked Aadhaar wherever the full number is not needed. When you give any photocopy, write the purpose and the date across it, something like “For check-in at XYZ Hotel only, 17 October 2026”. Then sign across the text without covering the photo. A copy marked like that is far harder to reuse for anything else.

Lock your Aadhaar biometrics through the UIDAI website or the mAadhaar app. Locking stops anyone from using your fingerprints or iris to authenticate, which shuts the door on biometric payment fraud. It does not affect UPI, net banking or card payments. If a parent depends on fingerprint-based rations or cash withdrawals at a banking point, remember the lock stops those too, so unlock before the visit or leave it off. Check your Aadhaar authentication history on the UIDAI portal once in a while to see where your Aadhaar has been used. Pull your credit report every year to catch any loan opened against your PAN.

There is a catch in the lock that nobody talks about. Unlocking needs an OTP on the mobile number linked to your Aadhaar. Lose your phone or your SIM and you cannot unlock. Getting a replacement SIM at most mobile shops today means Aadhaar eKYC with a fingerprint, which is exactly what you have locked. You are stuck in a loop. A shop that accepts a driving licence or passport for a replacement SIM breaks the loop. One that only knows Aadhaar keeps you stuck. That is why we need to demand alternatives now, while we can.

Finally, ask the simple question before handing anything over: will you keep this? Under the Digital Personal Data Protection rules now coming into force in phases, a business collecting your personal data has to tell you why it needs it. If the receptionist only needs to look at your card, let them look and take it back. Showing a card and leaving a copy are two very different things.

A sensible wallet setup

Putting it all together, here is the setup I would recommend to most people. Make the driving licence your everyday card, the one you hand over without thinking. Keep the voter ID as the backup that never expires. Leave the passport at home except when you travel or need maximum trust. Keep Aadhaar at home, use the masked version when you must show it and give the full version only where the law actually requires it. Keep PAN for tax and banking, never for a hotel register.

None of this needs new laws or new apps. It needs one change of habit: stop treating Aadhaar as the default answer to “any ID proof?”. The best ID proof in India is the one that proves enough for the situation in front of you and nothing more.

FAQ on ID proofs in India

Over to you

The next time someone says “Aadhaar card please”, pause for a second and pick the card on purpose. Show the one that proves enough. Guard the ones that unlock your money. It is a small habit that keeps your Aadhaar out of a hundred cupboards.

Which counter has insisted on Aadhaar with you recently and did they accept another ID when you offered one? Do comment on the post with your experience. And if any rule or detail above has changed or is not correct, say so in the comments. I would rather fix the post than let a wrong detail float around.